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22 and a multi-ported fluid connector (not shown). In the example shown in 
Figure 1, the module 49 contains a subsea control module (SCM) and of the 
general type forming part of a modular system for subsea use designed by Alpha 
Thames Limited of Essex. United Kingdom, and referred to as AlphaPRIME. 
' The SCM 50 contains a subsea electronic module (SEM) 51 which 

contains hardware and software and which is designed exclusively to control the 
operation of specific devices 60 which are contained in the SCM 50 or which are 
to be added based on possible future requirements of the system as determined 
when the SEM 51 is first installed in the module 49. The devices 60 may include 
electrically actuated valves manufactured under the names PROACT and 
REACT by Alpha Thames Limited and separators. Messages are passed back 
and forth to the host facility by the SEM of the SCM. 

Further SCMs 70 and SEMs 71 which comprise simple electronic circuits 
are also contained within the wellhead trees 30 themselves and receive the 
electrical signals from the SEM 51 of the SCM 50 to operate other devices, such 
as valves and sensors (not shown), contained in the wellhead trees. The 
wellhead trees 30 connect onto the SOM 40 to provide their communications. AH 
communication to and from the trees 30 has to pass via the host facility 11. 

The number of devices which can be controlled is iinniited by the capacity 
of the SEM. The SCM is a thin walled oil filled, pressure balanced hydraulic 
device. Conventionally, the SCM receives high pressure hydraulic fluid from the 
host to power the hydraulically operated valves on the tree/manifold. The SEM is 
a gas filled thick walled pressure vessel normally comprising a cylinder of 
approximately lOQmm . diameter containing electronic capacity in the form of 
microchips, printed circuit bdgrds etc. The electronics in the SEM receive control 
signals from the host and convert these into simple electrical sighals that operate 
simple shuttle valves, etc contained in the SCM to control the high pressure 
hydraulic fluid to open and close production valves on the wellhead trees. The 
design engineer has to predict the expansion of controlled equipment likely over 
the field life on the manifold and wellhead trees. However, every additional 
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connection to the SCM 50.70 and SEM 51.71 contained therein are additional 
failure points, and so possible future expansion is weighed against system 
reliability. 

There are also limitations on the size of the field. Subsea distribution 
5 modules (SDM) can be chained together to connect more SCMs 50,70 and 
SEMs 5tT7i together but with each additional unit there is an additional loss, so 
there is a finite size to the field. 

' The SEMs 51 ,71 of the SCMs 50,70 have physical limits on the number of 
connections that can be made to devices. Cables have to exit the casing of the 

10 SEM. via penetrators. As the SEM is at atmospheric pressure and the outside 
pressure could be 300 times that, the cross section of the penetrator must be as 
small as possible. As the cross sectional area increases the effect of the outside 
pressure will b6 to push the penetrator or cables through the wall of the SEM and 
into the SEM and compromise the seal. As more and more cables are required 

15 to connect to outside devices the cost to seal the SEM 51.71 of the SCM 50.70 
increases. Shown on Figure 1 are lines between the SEM of the SCM and the 
devices 60. Each line comprises a bundle of cables 53 to control the device. 
Each bundle requires an SEM penetrator, on a basic system there could be 15 or 
more penetrators,' which significantly increases the complexity and cost of the 

20 system. 

As technology is progressing at a significant pace, cun-ent field 
development control systems limit the- ability to add new functionality or new 
technology. 

In order to embrace new technology, particularly for subsea field 
25 developments. It is important to have readily maintainable and upgradeable 
-modular systems that can allow for future expansion as equipment improves over 
time. It is also important to ensure that the control and powering of these systems 
also takes a modular form and can keep pace with system changes without the 
need to change the hardware during field life. 
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There is a need to provide a method and system for controlfing devices of 
a hydrocarbon production system which enables the production system to be 
upgraded or modified over time without recourse to changes in instrument , and 
. control hardware. 

According to one aspect, the present invention consists in a method for 
controliing- the operation of devices of a hydrocarbon production system, 
comprising the steps of:- 

.. (a) connecting at least one central controller to at least one local 
controller, the central Gontroller(s) being reprogrammable and the local 
controI!er(s) being configured to locally control the operation of at least one 
respective device, 

(b) transmitting data between the central controller(s) and the local 
controller(s) in response to said central controller(s) receiving signals 

(c) processing said transmitted data at the local controlier(s), and 

(d) transmitting data between the local controller(s) and Its associated 
device(s) according to the processed data so as to locally control the operation of 
the device(s). 

By / using a -local controller to locally control specific devices and 
reprogrammable eentrar cpntFOllers to controj; the .local controllers, control of 
existing devices can be modified or new devices and their local controllers can 
be subsequently added to any part of the system without requiring hardware 
chafjg©sto4h6 central contfoljersi. 

Preferably, the method step (b) includes transmitting data between, the 
centr^^l ; controller's) and the teeal '^^ntrollerCs)^^:! central 
CdntrQll0f(s) receiving signals ^ anyrother central controllef, or; alternatively or 
i a60imh$i\y .from thev local' cQntroller(^)> The ..method accprding to this latter 
m'0nti<5r0d feature allows the eehtml eontrol]e|:(s) to operate independently of a 
.■•Ijcjstfgeility^; . • . -.^ ■ ■ .-r -- • ■• .V.;- 

Additionally, the method may iRclude the steps pf:- 

(e) connecting a remote master controller to the central controlIer(s), 
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(f) transmitting data between the master controller(s) and the central 
controller(s) so as to remotely monitor the central controller(s). 

Alternatively or additionally, the method may Include the steps of 

(g) transmitting data between the remote master controlier(s) and the 
5 central controller(s) so as to reprogram the central controller(s) to enable newly 

-added devices and their local controllers to be titetJ in the aforementioned 
method or to enable the central controller(s) to control existing local controllers in 
a different manner. 

Preferably, the method includes a step of feeding back data signals from 
10 the device(s) to the local contro!ler(s), for example, in response to the device(s) 
receiving data or activating. 

Also preferably, the method includes the step of feeding back data signals 
from the local controller(s) to the central controlIer(s). for example, in response to 
the local controiler(s) receiving feedback data signals from its associated 
15 device(s) or from the central controller(s). 

Additionally, the method step (d) may include controlling the device(s) by 
activating or powering a sensor or valve, actuating a compressor, pump or 
actuator. 

In a preferred embodiment, at least two central controllers are contained in 
20 one or rriore subsea control modules of retrievable modules of one or more field 
developments. The central local controllers are microprocessors or central 
processing units. Local rcontrollers are connected to their associated devices 
such as. motors, temperature sensors, pressure sensors, or magnet valves, 
.; "which are coiatained in the or each cohtrel module Itself i' In Well^ tree's and 
25 any other type iof subsea apparatus suitable for use with a subsea hydrdcarboh 
production system. The method of the invention enables thfe-devic^s arid their 
locah<Jontrollefs to be connected to the or each central controller via a common 
data bus so that the number and size of penetrators used in the system can be 
kept to a minimum. 
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Additionally, in the preferred embodiment the method may include the step 
of connecting the central controller of one subsea control module to one or more 
central controllers contained in one or more other subsea control modules in the 
same or another field development, transmitting data between any of the central 
5 controllers and any of the local controllers contained in one of said subsea 
modules or a tree of the same or another field •de'V'elopment. For example, the 
method may include the step of transmitting data from a sensor to its local 
controller in response to the sensor detecting an excess of fluid in a first field. 
. transmitting data from the local controller back to a first central controller of a 
10 subsea control module of the first field, transmitting data between the first central 
controller and one or more other central controllers contained in any subsea 
control modules In the same and other fields to determine a second field which 
has a shortage or suitable outlet, and transmitting data between the first central 
. controller and other local oontrollers in the same and other fields so as tp control 
15 a device in the second field to allow excess fluid to be transferred from the first 
field to the second field. 

According to anotHi^r aspect, the present Invention^consists in a system for 
controlling the operation of devices of a hydrocarbon production system, 
conriprising;- 

20 (a) connecting nieans for connecting at least, oi^ie cential .controlle 

.at least pae. lpcal. cQntrbller. the central controiler(s) being reprogrammabte and 
,the.lQeal .cgntr€?llQr(s) feelrig.^jonfigured to Iq the operation of at least 

:A©ner^pQctivede\ac(^,^ . -■■ ■ 

,, s,. ,(b) ;-..^^ transmitting da^ between, the^ central 

25 : v,contro|Ieii(s) .:,^i3di^ cantrolleirC?) .in response, to said central CQritroller(s) 

. .. receivi|jg.§jgrt^l^, , . = / . :. ... 

(js) ; processing . means for prpcessing . said transmitted data^^a^^^ 
.contrpller(s), and . - ■ ' 
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(d) transmitting means for transmitting data between the local 
controllerCs) and its associated device(s) according to the processed data so as 
to locally control the operation of the device(s). 

Preferably the system includes control means for remotely controlling the 
central controller^) and transmitting means for transmitting data between the 
master control means and the-oentral controllers so as to remotely monrtor the 

central controller(s). 

Alternatively or additionally, a system may include transmitting means for 
transmitting data between the master controlling means and the central 
controller(s) so as to reprogram the central controller(s) to enable new devices 
and their local controllers to be controlled by the central controller(s) or to enable 
me central controller(s) to control the existing local controller(s) and in a different 

manner. , , 

Pi^ferably the system includes means for feeding back data signals from 
the device(s) to the local controller(s) and from the local controiIer(s) to the 

central controller(s) 

According to yet another aspect, the present invention compnses a 
computer program product comprising program code means stored .n a 
computer readable medium for performing a method according to any one«f the 

method steps of any one of the aforementioned methods^when that product ,s 

run on a computer. . ^ r 

, - The inyention will now be described, by way of.example, wrth reference to 

the accompanying drawings, in which:- 

Figure 1 is a schematic diagram of a subsea hydrocarbon production 

system aecording to the prior art; 

Figure 2 is a schematic diagram of a system according to a preferred 
embodiment of 8ie present invention; 

Figure 3 is a block diagram showing the logical layout of the system 

shown in Figure 2; 
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Figure 4 is a block diagram showing the logical layout and interaction of 
the first layers of the software which is run on the system of Figure 2; 

Figure 5 is a schematic diagram of the system of Figure.2 but with one of 
the system modules reconfigured to include several additional local controllers 
and devices; and 

Figure 6 is a schematic diagrain^ showing adjacent fields connected to 
each other by pipelines, power lines and communication lines. 

Referring to Figure 2 of the accompanying drawings, the system for 
controlling the operation of a hydrocarbon system has two central controllers 100 
contained in a first subsea control module 50a of a retrievable module 49a which 
is connected to a manifold 21' of a seabed facility 20'. A command/signal bus 
120 linKs a master control station 101 contained in a host facility 11' to each of 
the central controllers 100 of the first retrievable module 49a via a manifold 21'. 
The host facility 11' is. for example, onshore or on a fixed or floating rig and the 
master control station 101 comprises a processing means which, in this 
embodiment, is a central processing unit. The command/signal bus 120 also 
links the central controllers 10G of the first retrievable . module 49a and the master 
control station 101 to any other master control station (notshown) and, any other 
central controller existing in the same 170 or a different field. 

Local controllers are locally connected to one or more" specific devices, 
such as actuators 61. sensors 62. valves 63 and pumps (not shown) contained 
Within the -first retrievable mcjdule 49a and within each tree wellhe_ad 30'. The 
local controllers and the central controllers 100 are linked to. a comrnon data bus 
' 130 so tha^d^a may be trarisrnitted between the centralxontroll^rs 100 and the 
local controllers and between the central controllers 100 themselves. 
Furthermore, the one or more specific devices can only communicate via the 
single common data bus 130 to local central controllers 100 within that field 170 
and commuhication between the field 170 and any other field (not shown) is via 
the command/signal bus 120. 
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Each local controller comprises a processing means, such as a 
microprocessor, which is appropriately programmed to permit it locally to control 
and run its associated device or devices 61-63 in response to simple commands 
which are sent to it from one of the central controllers 1 00. 

Thus, instead of all the processing power of the control system being in a 
central place, the -d.^vices 61-63 of the system are controlled locally , by Joeal 
controllers which have their own processing power. Each local controller has 
enough processing power and programming to control the device or devices 61- 
63 which are locally connected to it. All commands issued to each device 61-63 
can be as simple as move here, do this etc. Each device 61-63 can be queried 
for its current status, during or after a procedure. Feedback when a device has 
finished a command can also be fed back to the central controllers 100 via the 
local controllers. As will be explained more fully below, this means that any 
proeessihg which is^pecifiG to a devi^ 61^63 can be perfomied within its local 
coritroirer. The central controllers 100 therefore only require new software and 
not new hardware to control a new device. 

As shown In Figure 2. a second retrievable subsea module,. 49b. which is 
identical to the first module 49a is connected to the manifold 21' at a ppsition 
adjacent to ^he position at which the first module 49a.js conqect^d so that if the 
first module 49a becomes inoperable, for example through .failure. or as a 
consequence of it being retrieved for servicing, a second module 49b can be 
used to perform aii the functions of tiie first moduj^ without interwpting operation 
of the produdtion system. To this end. the central contrpllers tOO.Qf th^ second 
module 4^b^^e ednhbcted.to the commori commaridfeigBai; bws 1:?Q^ the 
master contrdl ^tati6ri(s) lOi may transmit the command/signals to not only the 
cehtral controllers 100 of the first module but also the central controllers 100 in 
the second module 49b. Likewise. 4he local controllers and central controllers 
too contained inihe second module 49b are cpnnected,to the cprnnipn data bus 
' ^ 30 so that data can be transmitted bet>ween the c^tral controllers 100 of the 
second module 49b and between any other central controller 100 and between 
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the local controllers contained in the second module 49b and any other central 
controller. 

Figure 3 shows the logical layout of the system of the field 170 shown in 
Figure 2 and part of an additional field 180. The layout is split into four layers. At 
the bottom is the Device Layer 201. This layer contains all the sensors 61-63. 
motors etc for each 4evice. i.e. the components of each device. The next la^er 
up is the Device Control Layer 202. This is the layer that contains the local 
controller for each device 61-63. Each local controller is programmed to deal 
with the functionality of the device 61-63. These two layers 201.202 may be 
combined to provide so called "Smart Devices". The next layer up is the system 
control layer 203. This contains the central controller 100 that binds the Smart 
Devices together and makes them perform their tasks according to the system 
programming. 

Redundancy is provided by a voting system between central controllers 
100 contained within the subsea system. The voting system is based on the 
central controllers 100 in different subsea control modules of the same field 170 
communicating with each other to provide a mechanism whereby a controller 100 
that is found to be at fault is ignored. 

The top layer shown in Figure 3 is the Master Control Layer 204. 
Monitoring is performed here and system configuration changes are deployed 
from here. In this embodiment, many master controllers 101 are monitoring the 
subgea systems, or -selectively monitoring their specific field development. 
-Thrdughout this network, communication is only possible between 
devic^s/cohtrollersat the same level or on imnnediately^aqent levels. 

Figure 4 shows ^he logical layout and tnleraction of the yariou^ layers of 
the software portion of the invention. Th^ "eonnectlyity layer" -300 standardises 
the interface to the network. This functions as an abstraction layer so that many 
different types of networking can be used. The "Core Layer" 301 sits on top of 
the "Connectivity Layer". This layer 301 provides many functions. Firstly .t 
unifies the network connections together. Secondly it provides another 
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abstraction layer, a, this layer 301 loca, controller dlscoveo. -^---"7!°" 
etc is provided. Anything common to all local controllers is prov.ded here. The 
«nal layer that ma.es up the "Kernel" portion o, the system is the Dev.ce Dnve 
Layer" 302. At this layer 302. many local controller drivers are prov,ded. These 
pjvide the space control, and feedhacK, to the local — '^^^^^^Va 
written-for. New devices and their local controllers can be addedj^yjust adding a 
new driver to the central controllers. 

The next layer 303, which exists in user portion of the system, ,s the 
application that runs the local controller, and communicates with the other 
control systems, subsea units and hosts. 

The use of "Kernel" and "User programming techniques allows th,s .0 be 
implemented using current embedded computing technology. 

software programmes allow the local controller dnvers to be read^y 
updated Without the need to change control hardware. These also allow the 
cl^rcontrolle. to operate all the loc^ controllers and allow for new dev,ces 
rndTheriocal controller .0 be added in the system. .urthem,ore the programs 
llow the central controllers 100 to operate independently oth^^^^^ 

The centralxontrollers 100 can also communicate .w,th each other, v,a a 
common data bus 130, in a vo«ng system to agree on con^^^^^^^^^ 
ensure that commands from a controller that is issuing commands ,n error 

''"""'l^.ntral contr^^rs lOO can „nipate with centra, c^r^lers 100^ 

other subs.a units via the command/s«Bal bu.12p,to enab.^ 

nodal subsea irydrocarbon produotion syste,m t» be #ffeeted,,,5u5h a system 

S^^^n ^tworK Of subsea un«s connected to ,ne or :mr,. h^ or^ 

reivlngfacimiesbyane^^orKofp^^^^^^^^ 

fluids-tla ..tecBvely routed through th. network in a manner dependent on 
requirements andother requirements. The topside ,Ost rs^ly^ 
molring, sylm con«guration .n, -.suing con,mands. Sof^vare architecture 
, raLmodu,randstandardisedtoa.l,^foreasyadditionofnewdev,ces. 
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Figure 6 of a nodal subsea hydrocarbon productions system shows how 
adjacent fields can be connected to each other by a number of pipelines, power 
lines and communication lines to make the best use of existing infrastructure and 
to avoid the need for long and costly lines back to specific (possibly distant) host 
facilities. By enabling communication and control between the local controllers 
and-<Jentral controllers on the fields 170.180. paths can be set-up within a mesh 
or network of pipelines 400 (shown with solid lines) to permit excess fluid to be 
transferred from one field 170 to another 180 which has a shortage or suitable 
outlet, e;g. excessive water produced at one field can be transferred to a field 
which is injecting water for reservoir pressure maintenance or for disposal. 
Similarly, this mesh of lines may pennit alternate routes to be provided for fluid, 
power or communications should a problem occur with the existing route 
communication lines are shown with dotted lines. 

Methods for controllirtg the operation of devices of a hydrocarbon 
production system according to preferred embodiments will now be described 
with reference to the Figures of the accompanying drawings. 

Referring to Figure 2. initially, a central controller 100 of the first subsea 
moduli 49a is obhhected to a local controller of a valve 63 contained in a tree 30' 
whferi the module 49d is apprdpriately docked with the manifold 21'. The central 
controller 100 receives signals fed back on the common data bus 130 from a 
sensor 62 contained in the first subsea module 49a via the sensor's local control 
module. Data i^ then transmitted between the central controller 100 and the local 
controller of the valve '63. -The local controller of.the valve then prope^ses the 
trari^rriitted datif '^nd data is then transrnitted between it .and the valve 63 so as 
to locally cohtrdl the^operation of the valve 63. 

When remote rtionitoring of the system is required, the remote master 
control station 10t is conneoted^^to the central controller 100 of interest and data 
istransrrtitted between the master control station 101 and the central controller of 
Interest on the command/signal data bus 120 so as to renriptely monitor the 
central controller and any other eoritrollers or devices connected to it. 



wo 2004/003328 



PCT/GB2003/002787 



13 



In order to reprogram a central controller 100, a remote master control 
station 101 is connected to the central controller of interest and data is 
transmitted between the master control station and the central controller on the 
command/Signal bus 120 so as to reprogram the central controller for the 
aforementioned purposes. 

In order to upgrade the field without,significant disruption to production, 
the subsea module 49b shown in Figure 2 is retrieved and reconfigured to 
include several additional devices 64 and their local controllers. The local 
controllers are added to the data bus within the module 49c and the relevant 
drivers and updated control program are installed. The reconfigured module 49c 
is then installed on the field and commissioned. Figure 5 shows the reconfigured 
subsea module 49c. Once fully operational, the control program is updated ,n 
the non-reconfigured module 49a so that normal operation including voting, and 
redundancy, etc is restored. In due course, the other module 49a can be 
reconfigured in a similar manner. 

Referring to Figures 2 and 6. a central controller 100 of one subsea 
control module 49a is connected to central controllers 100 contained other 
subsea control modules in the same and other field developments 170,180. Data 
is fed back on the data bus 130 from a sensor 62 via local controller to a first 
central controller 100 contained in the subsea control module 49a in response to 
the sensor 62 detecting an excess of fluid in the field 170. The first central 
controller or master control station 101 of the first field 170 communicates w,th 
the other central controllers of all the fields to detemnine a second field wh^h has 
a Shortage of fluid or a suitable outlet. Data is then transmitted between the y 
central controller and other central controllers 100 contained in subsea con ro 
modules in other fields. Data is then transmitted between the second central 
controller of the first field 170 and local controllers in the first and other fields so 
as to control valves 63 in the first and other fields to allow excess flu.d to be 
transferred from the first field to the second field. 
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The system for controlling the operation of a hydrocarbon system may 
enable routing of fluids to be changed, and this needs to be confirmed via the 
master control station 101 in a host facility 11'. 



